Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.
Published: 2026-09-09
Score: 4.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Information disclosure via hard‑coded credentials
Action: Apply Patch
AI Analysis

Impact

The vulnerability is an Use of Hard‑coded Credentials flaw in Dell Secure Connect Gateway (SCG) 5.0. An unauthenticated attacker with remote access can leverage the embedded default credentials to log in. This leads to unauthorized information exposure, potentially revealing configuration data or other sensitive information stored by the appliance or application, but does not provide arbitrary code execution.

Affected Systems

Dell Secure Connect Gateway 5.0 Appliance versions earlier than 5.36.00.16 and Dell Secure Connect Gateway 5.0 Application versions earlier than 5.36.00.00 are affected.

Risk and Exploitability

The CVSS score of 4.4 indicates low to moderate severity. The EPSS score is not available, but the lack of a KEV listing suggests no widely known exploitation activity. The flaw can be exploited remotely over the network by an unauthenticated attacker, so it is important to patch or otherwise restrict access.

Generated by OpenCVE AI on September 9, 2026 at 16:05 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the appliance to version 5.36.00.16 or later, and update the application to version 5.36.00.00 or later.
  • Ensure that hard‑coded credentials are not in use on any operating system or service that hosts the SCG installation.
  • Restrict remote network access to the appliance and application to trusted administrators only, using firewall rules or VPNs.

Generated by OpenCVE AI on September 9, 2026 at 16:05 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 14 Sep 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 09 Sep 2026 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell secure Connect Gateway
CPEs cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:application:*:*:*
cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:virtual:*:*:*
Vendors & Products Dell
Dell secure Connect Gateway

Wed, 09 Sep 2026 14:00:00 +0000

Type Values Removed Values Added
Description Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.
Weaknesses CWE-798
References
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

Dell Secure Connect Gateway
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-14T13:33:44.484Z

Reserved: 2026-08-25T14:04:56.064Z

Link: CVE-2026-79731

cve-icon Vulnrichment

Updated: 2026-09-14T13:33:38.439Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-09T14:17:17.767

Modified: 2026-09-14T14:17:11.497

Link: CVE-2026-79731

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-10T20:30:16Z

Weaknesses
  • CWE-798

    Use of Hard-coded Credentials